Platform Principal Engineer

This position allows you to join a fast\-growing technology organisation focused on the critical migration and architectural evolution of our .NET services from AWS to Azure. If you are passionate about cloud\-native transformation and want to lead the shift toward asynchronous, high\-scale architectures, this opportunity is for you.

Role Summary

As an Azure Principal Platform Engineer, you will act as the authoritative Subject Matter Expert (SME) to help a major fintech architect, bootstrap, and build from scratch an enterprise\-grade, multi\-tenant AKS platform on a greenfield Azure landing zone. Crucially, you will guide the establishment of an internal platform team, designing the platform operating model and upskilling in\-house engineers along the way. You will also collaborate to upskill the in\-house team along the way.

The Impact You'll Make:

• Architect and Bootstrap: Design and provision a greenfield, highly\-scalable, multi\-tenant AKS platform from the ground up (focusing on underlying cluster architecture, not just workload deployment).


• Act as the Kubernetes Reference (SME): Serve as the authoritative internal expert for the vast Kubernetes ecosystem, filling a critical knowledge gap and guiding our long\-term architectural direction.


• Establish a Platform Operating Model: Help structure and establish an Internal Developer Platform (IDP), defining how the new platform team will interact with and empower developer teams through self\-service capabilities.


• Upskill and Mentor: Transition the in\-house engineering team into a high\-performing internal platform team throughout the platform build process.


• Observability: Design and implement enterprise\-grade logging, metrics, and tracing for Kubernetes at scale.


• IaC Leadership: Implement and manage Infrastructure as Code to a senior standard, taking charge of state strategy, module design, and drift management.

• Azure Core: Multi\-subscription landing zones, hub\-and\-spoke networking, Entra ID, Azure Policy, Private Link, Key Vault, Azure RBAC. (MUST)


• AKS Platform Architecture: Building strict multi\-tenant environments, logical isolation (namespaces/RBAC), network policies, resource quotas, upgrade strategies, node pools, and workload identity. (MUST)


• Advanced Kubernetes Ecosystem: Deep understanding of control plane mechanics, custom resource definitions (CRDs), and operators. (MUST)


• IaC: Terraform / Open Tofu module design. (MUST)


• Kubernetes Engineering: GitOps (Argo CD/Flux), secrets management, ingress/mesh, and OPA/Gatekeeper. (MUST)


• Observability: OpenTelemetry (MUST)


• Tooling: Spacelift, Atlantis, or Terraform Cloud (Desired)


• Governance: EPAC (Enterprise Policy as Code) (Desired)

• Recent, hands\-on experience operating multi\-cluster AKS in production environments, either multi\-region or multi\-tenant.


• Proven experience *building and architecting* complex Kubernetes platforms from scratch.


• Experience with Kubernetes platform engineering, including ingress and service mesh, OPA / Gatekeeper policy, secrets management, and progressive delivery.


• Strong security awareness, displaying comfort with CAF / ALZ patterns, least\-privilege IAM, network segmentation, and policy\-as\-code.


• Experience working with regulated or financial services workloads on Azure.


• FinOps instincts for managing AKS and networking costs effectively.

• The chance to join an organization with triple\-digit growth that is changing the paradigm of how software products are built.


• The opportunity to form part of an amazing, multicultural community of tech experts.


• A highly competitive compensation package.


• A flexible working environment.


• Medical insurance.

This listing is from Indeed. View original listing ↗